This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
D.14 Does system provide security reports of users and access ☒ Yes Please provide additional information below:
levels? ☐ No The system provides security reports detailing user
and admin activities, access levels, and rights.
Reports are available in the Admin panel and
Organization Audit and Event Logs page, and
include information on authorized and
unauthorized system use, security profiles by user,
and changes to access. Role-based access controls
are supported and customizable reports can be
generated.
D.15 Does system maintain role-based group and user access ☒ Yes Please provide additional information below:
control based on business functional requirements? ☐ No The system maintains role-based group and user
access control aligned with business functional
requirements. Access is managed through roles and
groups, with permissions granted based on job
responsibilities and business needs. The principle of
least privilege and separation of duties are
enforced, and access is centrally managed and
regularly reviewed.
D.16 Does system provide the capability to place security controls ☒ Yes Please provide additional information below:
on each system module and on confidential and critical levels ☐ No Role-based access controls (RBAC) are
within each module? implemented, allowing security controls to be
applied at the module and data classification level.
Access to confidential and critical data is restricted
to authorized users, and controls are enforced
based on data sensitivity. Automated tools identify
and protect confidential information, and
configuration management ensures controls are
maintained across system modules.
D.17 Does system provide capability to restrict access to particular ☒ Yes Please provide additional information below:
records within the system, based on User ID and groups? ☐ No The system supports role-based access control
(RBAC) and group-based permissions, allowing
restriction of access to records based on User ID
and group membership. Access is enforced
Page 16 of 19Jump to an indexed page (163 of 163)